CVE-2018-12575

On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of authentication via an HTTP request...

Security Bulletin: Vulnerability in IBM Rational RequisitePro with a potential for a TLS attack (CVE-2013-0169)

Summary The IBM GSKit component used in Rational RequisitePro is susceptible to a Transport Layer Security protocol vulnerability known as "Lucky Thirteen." The vulnerability might allow remote attackers to conduct distinguishing and plain-text recovery attacks by statistically analyzing timing...

Security Bulletin: Vulnerability in IBM Rational ClearQuest with potential for TLS Attack (CVE-2013-0169)

Summary The IBM GSKit component used in Rational ClearQuest is susceptible to a Transport Layer Security protocol vulnerability known as "Lucky Thirteen." The vulnerability might allow remote attackers to conduct distinguishing and plain-text recovery attacks by statistically analyzing timing dat...

CVE-2018-4242

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Hypervisor" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2018-4184

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Speech" component. It allows attackers to bypass a sandbox protection mechanism to obtain microphone access...

Zoho ManageEngine Applications Manager Access Control Vulnerability

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. An access control...

Apple macOS High Sierra input validation vulnerability (CNVD-2018-12161)

Apple macOS High Sierra is a dedicated operating system developed by Apple for Mac computers.Intel Graphics Driver is one of the drivers for the graphics card. A security vulnerability exists in the Intel Graphics Driver component of Apple macOS High Sierra versions prior to 10.13.5. The...

Apple macOS High Sierra Hypervisor Memory Corruption Vulnerability

Apple macOS High Sierra is a suite of specialized operating systems developed by Apple for Mac computers.A Hypervisor also known as a Virtual Machine Monitor VMM is an intermediate software layer that runs between a physical server and an operating system, allowing multiple operating systems and...

Apple macOS High Sierra Access Control Vulnerability

Apple macOS High Sierra is a dedicated operating system developed by Apple for Mac computers.Speech is one of the speech recognition components. A security vulnerability exists in the handling of microphone access in the Speech component in Apple macOS High Sierra versions prior to 10.13.5. An...

F5 BIG-IP Denial of Service Vulnerability (CNVD-2018-14718)

F5 BIG-IP ASM Application Security Manager is a Web Application Firewall WAF from F5 USA that provides secure remote access, protects email, and simplifies Web access control while enhancing network and application performance. A security vulnerability exists in F5 BIG-IP ASM versions 13.1.0...

Apple macOS High Sierra Accessibility Framework Information Disclosure Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Accessibility Framework is one of the accessibility components. A security vulnerability exists in the Accessibility Framework component in Apple macOS High Sierra versions prior to 10.13.5. An attacker...

Apple macOS High Sierra ATS Type Obfuscation Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.ATS is one of the Application Transport Security components. A security vulnerability exists in the ATS component in Apple macOS High Sierra versions prior to 10.13.5. The vulnerability can be exploited...

Apple macOS High Sierra memory corruption vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.IOGraphics is one of the input and output graphics components. A security vulnerability exists in the IOGraphics component in Apple macOS High Sierra versions prior to 10.13.5. The vulnerability can be...

Apple macOS High Sierra Arbitrary Code Execution Vulnerability (CNVD-2018-12162)

Apple macOS High Sierra is a specialized operating system for Mac computers developed by Apple Inc. in the U.S. IOFireWireAVC is one of the IO video transport components. A security vulnerability exists in the IOFireWireAVC component in Apple macOS High Sierra versions prior to 10.13.5. The...

Apple iOS and macOS High Sierra Mail Information Disclosure Vulnerability

Apple iOS and macOS High Sierra are products of Apple Inc. Apple iOS is an operating system for mobile devices; macOS High Sierra is a specialized operating system for Mac computers. mail is one of the email components. A security vulnerability exists in the Mail component of Apple iOS before 11....

Apple macOS High Sierra Firmware Device Configuration Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers. A security vulnerability exists in the Firmware component of Apple macOS High Sierra versions prior to 10.13.5. The vulnerability can be exploited by an attacker to modify the EFI flash area with the...

F5 BIG-IP Denial of Service Vulnerability (CNVD-2018-15638)

F5 BIG-IP is a collection of software and hardware that allows you to control the traffic that passes through your network. A denial of service vulnerability exists in F5 BIG-IP 11.x, 12.x, and 13.x. A remote attacker could exploit this vulnerability by sending specially crafted TLS data to cause...

AZL-7380 CVE-2018-11439 affecting package taglib for versions less than 1.13.1-1

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file...

PT-2018-3863 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.16.13 Description: The issue is related to the sr do ioctl function in the Linux kernel, which allows local users to cause a denial of service or possibly have other unspecified impacts due to a stack-based...

Adobe ColdFusion Cross-Site Scripting Vulnerability (CNVD-2018-10342)

Adobe ColdFusion is the United States of America Audobee Adobe a dynamic Web server products, which runs the CFML ColdFusion Markup Language is a programming language for Web applications. A cross-site scripting vulnerability exists in Adobe ColdFusion released in 2016 Update 5 and earlier versio...